Published: 19/01/2006 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote malicious users to cause a denial of service (CPU consumption or application hang) via a large network packet, which causes a WSAEMESGSIZE error code that is not handled, leading to a thread exit.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ca unicenter remote control 6.0_build_6.0.56.3
ca unicenter remote control 6.0
ca unicenter remote control 6.0_build_6.0.74
broadcom brightstor mobile backup r4.0
broadcom brightstor arcserve backup laptops desktops 11.0
broadcom brightstor arcserve backup laptops desktops 11.1
broadcom business protection suite 2.0
broadcom desktop protection suite 2.0
broadcom server protection suite 2
broadcom unicenter remote control 5.2
broadcom unicenter remote control 6.0

source: wwwsecurityfocuscom/bid/16276/info Computer Associates Unicenter Remote Control DM Primer is prone to a denial-of-service vulnerability Attackers may trigger a denial of service due to a hang Note that an attacker may easily source IP addresses because the service uses UDP Proof of concept: hping -2 -s 1025 -p 5727 -d 4097 ...

CWE-399 http://www.designfolks.com.au/karma/DMPrimer/http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33756 http://www.securityfocus.com/bid/16276 http://secunia.com/advisories/18531 http://www.osvdb.org/22529 http://securitytracker.com/id?1015504 http://www.vupen.com/english/advisories/2006/0236 http://www.securityfocus.com/archive/1/422381/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27101/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-0306

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect